Critical Brotli HTTP2Shell vulnerability triggers emergency patches

A critical flaw in the Brotli C decoder, known as HTTP2Shell, Broccoli2Shell, and Node2Shell, could allow attackers to corrupt memory and access sensitive data. In Node.js, exploitation can crash the process, expose memory, and enable remote code execution. The source states that there are no reports of malicious exploitation in the wild, although proof-of-concept exploits for Node2Shell have been published.